Guides
Contractual risk transfer: shifting liability by contract and insurance
How indemnity clauses, insurance requirements, waivers and bonds shift liability to a counterparty, and where each fails: solvency, endorsements, state law.
Contractual risk transfer is the practice of using a contract to move the cost of a possible loss to someone better placed to bear it, usually a subcontractor, vendor, tenant or customer. It works through four linked pieces: an indemnity clause, insurance requirements that fund it, waivers that stop the insurers from suing each other, and sometimes a bond. The transfer is only as strong as the weakest link, and the usual weak links are an indemnitor without the money, an endorsement that is not on the policy, and a state statute that voids the clause.
The four tools
| Tool | What it does | Where it fails |
|---|---|---|
| Indemnity and hold harmless clause | The counterparty promises to defend you and pay claims arising from its work | The counterparty cannot pay; the clause is void or narrowed by state law; the promise is not "insured contract" coverage |
| Insurance requirements | Counterparty buys specified coverages and limits, names you as an additional insured, and makes its policy primary | The contract asks for the wrong forms; the endorsement is missing; limits are shared with other insureds |
| Waiver of subrogation | Its insurer cannot recover from you what it paid | The policy lacks the endorsement; the waiver is one-way when it should be mutual |
| Surety bond or guarantee | A third party guarantees performance and payment | Bonds cover default, not general liability; a bond has its own conditions |
The clause and the insurance belong together. An indemnity with no insurance behind it is a claim against the counterparty's balance sheet. Insurance requirements with no indemnity leave you to prove the counterparty was negligent. Read indemnification and hold harmless clauses and your insurance for clause wording and contractual liability coverage and insured contracts for how the CGL treats the promise.
Who is on each side
You sit on both sides of risk transfer, usually at once. A general contractor asks its subcontractors to indemnify it while the owner asks the contractor to do the same. A landlord asks tenants for additional insured status; the tenant asks vendors. When you are the one signing, you are the indemnitor, and your insurance has to respond to what you promised. The contract insurance requirements checker compares a contract's insurance section with the coverage you carry.
Why a certificate is not the transfer
A certificate of insurance summarizes coverage on a date. The standard ACORD certificate says on its face that it is issued as a matter of information only, confers no rights on the certificate holder, and does not amend, extend or alter the policy. Whether you are actually an additional insured depends on the endorsement attached to the policy. Ask for the endorsements, not only the certificate. certificates of insurance: what they prove and what they do not covers what a certificate shows and omits, and the Certificate of insurance (COI) review checklist is a working list for reviewing one.
The insurance requirements, piece by piece
Limits. State a required limit for each coverage: commercial general liability per occurrence and aggregate, auto liability, workers' compensation with employers' liability, umbrella or excess, and professional liability where design or advice is involved. The CGL aggregate is shared by everyone the policy protects, so a subcontractor working for ten general contractors may have used up the aggregate by the time your claim comes. A per-project aggregate endorsement (ISO CG 25 03 for designated construction projects) addresses that, and umbrella follow-form coverage helps.
Additional insured status. On ISO forms, CG 20 10 (ongoing operations) covers a scheduled owner, lessee or contractor for liability for bodily injury or property damage caused in whole or in part by the named insured's acts or omissions during its work. CG 20 37 adds completed operations after the work is done. The 04 13 editions also state that the insurance applies only to the extent permitted by law, is no broader than the contract requires, and pays the lesser of the limit the contract requires and the limit on the declarations page (sample copy of CG 20 10 04 13). That last point means a contract that is silent on limits or scope gives the additional insured less than people assume. See additional insured endorsements explained.
Primary and noncontributory. The ISO endorsement CG 20 01 04 13 makes the named insured's CGL respond first for the additional insured, without contribution from the additional insured's own insurance. It applies only when the written contract requires it, and it works only through the policy it is attached to, so an umbrella needs its own wording.
Waiver of subrogation. CG 24 04 is the scheduled-party form for waiving the insurer's right of recovery; blanket wording is available from many carriers. Workers' comp has its own waiver endorsement (NCCI WC 00 03 13). Mutual waivers are common between landlords and tenants. See waiver of subrogation: what it is and when contracts require it.
Insurer quality. Contracts commonly require an insurer rated A- VII or better by AM Best and sometimes "admitted" status, so that a state guaranty fund stands behind it. These are conventions, not rules, and the right number depends on the project.
Tiering requirements by risk
A one-size contract makes small vendors uninsurable and lets dangerous work slip through. Many organizations tier by hazard. This hypothetical grid shows the idea; it is not a market standard.
| Tier | Example work | GL per occurrence / aggregate | Auto | Umbrella | Other |
|---|---|---|---|---|---|
| Low | Office cleaning, small deliveries | $1 million / $2 million | $1 million | none or $1 million | Workers' comp statutory |
| Medium | Interior trades, repair work on site | $1 million / $2 million | $1 million | $2 million | AI and waiver endorsements; completed operations |
| High | Roofing, excavation, crane work, hot work | $1 million / $2 million, per-project aggregate | $1 million | $5 million | Pollution; professional if design; performance bond |
Set the grid with your broker, because the right figures depend on your own balance sheet, the contract value and the project. risk transfer vs retention: avoid, reduce, transfer or retain frames the larger choice between transferring a risk and keeping it.
State law can undo the clause
Many states have statutes limiting construction indemnity, especially for the indemnitee's own negligence. Texas Insurance Code chapter 151 and New York General Obligations Law section 5-322.1 are two examples, and other states take other lines. Some of these statutes also limit additional insured coverage that would give back the same protection. Details and examples are in contractual liability coverage and insured contracts. Because the governing law is the one chosen in the contract or the state where the work happens, check it before relying on a form clause. workers' comp and benefits requirements by state and a construction attorney are the next stops. This guide is general information, not legal advice.
Making it work: a process
- Decide what you want to transfer. Identify the exposures the work creates: injury to others, property damage, pollution, professional error, theft of your property.
- Use a requirements matrix like the one above, owned jointly by risk, procurement and legal.
- Put the requirements in the contract, including endorsement form numbers or equivalent wording, cancellation notice, and the duty to flow the same requirements to lower tiers.
- Collect policies' endorsements along with the certificate before work starts. Review them against the matrix.
- Track expirations and ask for renewal certificates before the old policy ends. Software helps; see Certificate tracking software and digital COIs.
- Enforce. If a subcontractor lacks coverage, either stop work or withhold payment. A contract term you never enforce is a weak defense later.
- Tender fast. When a claim arrives, send a written tender to the indemnitor and to its insurer, as covered in tendering a claim to another party's insurer.
- Audit once a year on the sample of high-tier vendors.
A hypothetical loss
Say a restaurant hires a 6-person electrician under a one-page purchase order. A worker for the electrician leaves a ladder in the kitchen, and a diner trips and sues the restaurant. The restaurant's lawyer finds no indemnity, no additional insured endorsement and no certificate. The restaurant's own general liability insurer pays the defense and any settlement, the claim goes on the restaurant's own loss history, and the insurer may try to recover from the electrician on a negligence theory, with no contract to help. Had the restaurant required a CGL with additional insured status and an indemnity, the electrician's insurer would have been the first to respond. The example is invented to show the pattern.
Key takeaways
- Contractual risk transfer needs an indemnity clause, insurance requirements to fund it and enforcement that you actually carry out; a certificate alone proves very little.
- Ask for the endorsements. CG 20 10 and CG 20 37 for ongoing and completed operations, CG 20 01 for primary and noncontributory, and CG 24 04 or blanket wording for waivers are the ISO forms contracts commonly name.
- The 04 13 editions of the additional insured forms cap coverage at the lesser of the contract's required limit and the policy limit, and at the scope the contract requires.
- Anti-indemnity statutes and limited insurance can leave the clause unenforceable or uninsured; the state's law and the exact policy forms decide.
- Tier requirements by risk, track expirations, flow terms down to lower tiers and tender claims promptly.